> ## Documentation Index
> Fetch the complete documentation index at: https://artie.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Email login codes

> Require a code sent by email when members sign in to the Artie dashboard with an email and password.

Company admins can require a second step for email and password sign-ins. After entering their password, the member enters a 6-digit code that Artie emails them, and only then are they signed in.

It only applies to email and password sign-ins. Google, SSO, and magic link sign-ins are unaffected, and so are API keys.

## Turn on email login codes

You must be a company admin.

1. Go to [Settings > General](https://app.artie.com/settings?tab=company).
2. Turn on **Require email code for password login**.

The setting saves as soon as you switch it. Nobody is signed out: each member is asked for a code the next time they sign in with their email and password.

If a member belongs to more than one company, they need a code whenever any of their companies has the setting on.

## Signing in with a code

1. The member signs in with their email and password as usual.
2. Artie emails a 6-digit code to their account's email address. The code is also at the start of the subject line, so it shows in the notification.
3. On the **Check your email** screen, they enter the code or paste it in. They can also click **Sign in** in the email instead.

The **Sign in** button only works in the same browser where the member entered their password. Opened in a different browser, it shows the code so they can type it into the original one.

### Remember this device

The **Remember this device for 30 days** box lets a member skip the code in that browser for 30 days. It is checked by default when entering the code by hand. Signing in with the email's **Sign in** button never remembers the browser, because the member doesn't see the box first.

### Code rules

| Rule | Limit |
| - | - |
| Code length | 6 digits |
| Code expiry | 10 minutes |
| Uses | Each code works once |
| Wrong attempts | 5 per code, then the member signs in again for a new code |
| Wrong attempts in 24 hours | 20 per account across all codes, then the member waits or resets their password |
| Resending | Once every 30 seconds, up to 10 times an hour |
| Sign-in window | Resent codes stay valid for at most 30 minutes after the member entered their password |

## Advanced

> **What happens when a member resets or changes their password**
>
> Changing or resetting a password cancels any sign-in that is waiting for a code and forgets every remembered browser for that account. The next email and password sign-in asks for a new code.

> **Members whose emails bounce**
>
> If a previous email to a member's address bounced, Artie can't send them a code and shows a message asking them to contact support. They can still sign in with Google or SSO if your company allows it.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.